
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4c63304e-66b9-3726-9842-2f821bb164fd.roa
File: 4c63304e-66b9-3726-9842-2f821bb164fd.roa (raw, json)
Hash identifier: 4mOjqXf1zpidMXjN8qXfXLzds/ZzaqU/B/5J3zdLamY=
Subject key identifier: 8F:6D:5C:FF:DE:C4:7A:51:7E:57:11:FA:59:88:A6:6D:78:D5:07:75
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584D55BA4967E2F7B3AED55E5EC0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4c63304e-66b9-3726-9842-2f821bb164fd.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 3360
IP address blocks: 20.134.2.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:ba:49:67:e2:f7:b3:ae:d5:5e:5e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=720c464d-5084-446a-9dfe-2bb0f91ce3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7c:ef:0b:94:34:5b:fa:39:4a:33:45:99:9f:
30:f8:92:72:c9:16:88:77:89:5d:1d:23:d8:0a:fd:
f9:67:71:a1:b0:ab:19:7e:fa:ee:17:b7:18:db:b1:
81:2e:80:86:3b:02:08:87:dd:c1:7e:d6:e3:63:83:
ee:20:b9:f5:37:f6:88:74:6f:1e:07:63:4f:51:36:
55:3a:9f:35:4f:ce:93:2d:7f:74:f2:de:a6:fa:02:
24:37:d2:ea:c3:f0:0e:e5:6b:ef:ef:95:81:7b:82:
03:c0:a1:41:71:c3:35:eb:9d:fc:5a:3a:a3:53:4a:
3f:2b:a8:c7:c7:65:fe:1d:59:b6:2a:1d:5c:a5:67:
00:6b:f9:1c:4e:b8:ed:65:0d:19:fc:c3:9b:b6:38:
1a:26:c8:df:f6:d7:0f:f1:8f:3e:4c:65:fe:2d:fa:
82:6c:c8:d3:b0:52:da:1e:d4:95:b4:5f:b3:e2:4b:
5d:3c:31:0b:a5:75:0b:2c:a2:20:e3:25:e7:2b:46:
d1:79:f3:d8:3c:f1:25:9f:a3:55:e5:39:94:5a:d6:
a0:bd:7a:0c:a9:ec:0e:c3:c4:0a:fe:7e:6d:41:f2:
38:ad:c7:d7:33:30:55:ad:e9:69:f2:ec:cb:35:27:
63:91:50:08:37:29:79:1d:8f:4e:a8:c8:88:de:67:
4d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6D:5C:FF:DE:C4:7A:51:7E:57:11:FA:59:88:A6:6D:78:D5:07:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4c63304e-66b9-3726-9842-2f821bb164fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.134.2.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:7f:f9:34:4d:4d:d6:c4:43:58:55:d9:22:bd:f2:28:b1:a4:
d1:03:e0:5d:f6:0f:80:2d:1a:69:9d:4d:ce:47:77:82:ed:75:
fe:f4:5e:08:d0:54:78:27:80:4c:82:11:d4:18:95:37:51:56:
3b:1b:c6:d4:c9:c6:4e:a8:86:89:c7:d0:d7:6f:a0:69:bf:fe:
19:d3:0c:1f:6b:25:97:86:71:9d:54:b8:be:90:1b:ee:a4:bf:
7f:f2:9d:ab:3e:97:10:6b:f2:9d:0c:dc:cb:41:17:d0:1e:05:
bc:68:de:08:57:be:57:72:60:73:b2:51:9a:28:85:8b:78:b0:
a9:51:ee:eb:23:68:08:23:b2:14:17:ce:82:fc:df:3f:0d:c9:
2a:0a:9a:bd:31:ea:1a:d1:0e:41:5c:92:ab:b5:8e:66:e0:3a:
6d:bf:57:70:7f:41:fb:71:f5:a3:7c:ea:ac:ff:6d:71:68:4c:
3c:de:25:a1:57:41:64:a1:5e:b1:f3:9e:c3:62:5b:1b:33:22:
c3:4b:9a:9a:59:92:5b:65:04:5b:be:ce:12:79:ab:b8:03:8e:
b3:f1:4f:8a:4a:4d:3e:11:26:56:89:6d:39:38:71:be:bb:0d:
ef:58:58:c7:9c:ba:4a:c0:1f:dc:1b:8b:8b:4c:38:49:07:4b:
14:1e:f9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:30:49 2026 by rpki-client